added password authentication to user